Litlo Privacy Policy
Version [2026-10-global-4] · Announced October 4, 2026 · Effective October 4, 2026
- Controller and operator: Taejun Park, operating as Litlo
- Person responsible for privacy requests: Taejun Park, operating as Litlo
- Contact: support@litlo.app
1. Scope
This Policy explains how Litlo processes personal information in the Litlo app and related services (the "Service"). One Policy applies to every Member, wherever they live. Country-specific requirements are set out in the Republic of Korea Addendum and the United States Addendum at the end of this Policy. For U.S. users, the U.S. Consumer Health Data Privacy Policy also applies to consumer health data.
2. Information processed, purposes, legal basis, and retention
| Category | Information | Purposes | Basis | Retention |
|---|---|---|---|---|
| Account | Apple/Google account identifier, name (nickname) and email provided, profile photo (optional), language, login and security information, consent records | Identification, account operation, support, exercising rights | Performance of contract | Until account deletion (see Section 8) |
| Child | Name (nickname), date of birth, sex (optional), photo (optional), relationship to the Member | Baby Profile, age-based content, linking Records | Consent (given by the Member as the child's parent or legal guardian, or with their authorization) | Until the profile or account is deleted |
| Care Records and journal | Feeding, sleep, diaper, pumping, bath, play entries and times, notes, journal entries and photos | Storage, display, statistics, device sync | Performance of contract | Until deleted or account deletion |
| Health information | A child's temperature, medication name, dose and time, symptoms, growth measurements, doctor and vaccination records, other health notes | Storing, displaying, charting and summarizing health Records you request; sharing with Caregivers you invite | Separate consent (Consent to Collect and Use Health Data) | Until the Record is deleted or account deletion |
| Caregiver sharing | Invitation relationships, Caregiver account and display name, access rights | Sharing a child's Records with Caregivers you invite | Performance of contract | Until access is removed or account deletion |
| Litlo AI | Questions and conversations, transcribed text of voice records, child's age and sex, recent Records you choose to include (last 14 days, up to 300 entries) and any health information within them | AI responses, organizing voice records, conversation history, error and usage management | Separate consent (Litlo AI Consent) | Until you delete the conversation or delete your account |
| Community and support | Posts, comments, images, nickname, reports and blocks, support messages and attachments | Posting, safety, support | Performance of contract | Until deleted; moderation and support records up to 3 years |
| Purchases and device | App Store transaction IDs and subscription status, push token, device and app info, access and security logs | Purchase verification, notifications, security and error handling | Performance of contract; legal obligations | Purchase records up to 7 years; logs up to 90 days |
| Marketing | Email, push token, app language | Sending news about features, events, and offers | Consent (optional) | Until you withdraw or delete your account |
Litlo does not collect payment card numbers, address books, or precise location. For voice logging through Siri, Litlo receives the text supplied by the system rather than the original audio. Apple's own processing of Siri requests follows Apple's notices and settings.
3. Children
You must be at least 14 years old to create a Litlo account. A Baby Profile is information a Member enters about a child in their care; it is not an account for the child. Only a child's parent or legal guardian, or a person authorized by them, may create a Baby Profile. When you create a Baby Profile, you consent to the collection and use of the child's information as the child's parent or legal guardian, or with their authorization, as described in the Personal Information Collection and Use consent you gave at signup.
4. Health information
Litlo does not treat every Record as sensitive. Temperature, medication, symptoms, growth measurements, doctor and vaccination records, and other health notes are health information and are processed only with the separate Consent to Collect and Use Health Data given at signup. Private journals, Community posts, and general support messages are not collected as health information. Litlo does not sell health information or use it for advertising.
5. AI processing
AI Chat and AI processing of voice records are available only after you give the separate Litlo AI Consent on first use. Without that consent, no information is sent to the external AI provider: AI Chat is unavailable, and voice records are organized without the external AI provider.
With your consent, AI Chat uses your question, related conversation, and your child's age and sex. If you turn on including recent Records, up to 300 structured Records from the last 14 days are added. Litlo masks some known identifiers before processing, but cannot remove every piece of personal information you type. Litlo does not use AI conversations for advertising or provide them to train public AI models. AI responses may be inaccurate and do not replace medical judgment.
You can withdraw the Litlo AI Consent at any time in Settings > Litlo AI. New AI requests and transfers to the external AI provider stop; requests already sent cannot be recalled. Withdrawing consent does not delete existing conversations; you can delete them separately.
6. Processors and International Transfers
| Recipient | Task and information | Country, timing, and method | Retention |
|---|---|---|---|
| DigitalOcean, LLC · privacy@digitalocean.com | Hosting, database, and logs: account, child, Record, and technical information | United States (NYC2); transmitted over an encrypted network when you use the Service | While the Service is provided, stored and deleted on Litlo's instructions; Litlo retention in Section 8 |
| DigitalOcean, LLC (Spaces) · privacy@digitalocean.com | Object storage: photos, attachments, related identifiers | United States (NYC3); transmitted over an encrypted network on upload and viewing | While the Service is provided, stored and deleted on Litlo's instructions; Litlo retention in Section 8 |
| Apple Inc. (Apple Push Notification service) · Privacy contact | Push delivery: device token, notification content and event identifiers; Record notifications may include child and Caregiver display names | United States and other countries where Apple operates; transmitted when a notification is sent | Undelivered notifications up to 30 days depending on expiration; other data under Apple's policies |
| Google LLC (Gemini API) · Privacy contact — only if you give the Litlo AI Consent | Generating AI responses and organizing voice records: questions, conversations, child's age and sex, Records you choose to include, transcribed text | United States and other countries where Google operates facilities; sent over an encrypted connection when you use AI | Up to 55 days for abuse monitoring; not used to train models under the paid API terms |
DigitalOcean's data processing agreement generally provides deletion within 30 days after Litlo's DigitalOcean service account is deactivated, subject to statutory-retention and isolated rotating-backup exceptions.
When you sign in with Apple or Google or purchase through the App Store, Apple and Google process information for their own services under their own policies (Apple, Google). Litlo receives only the name, email, and account identifier you authorize and the result of App Store transactions. Signing in does not send care Records to Apple or Google. Deleting your Litlo account does not end Apple's or Google's own retention.
7. Caregivers, Community, and disclosure
When you share an invite code, the child's profile and Records are shared with the Caregiver who joins with that code. The invite screen shows what will be shared and how long the code is valid. Private journal entries and journal photos are not shared. Removing a Caregiver stops future access but cannot recall copies the Caregiver already kept.
Community posts, comments, and images may be visible to other users. Private Records are never published automatically. Please do not post your child's health information in the Community.
Litlo does not sell personal information. Litlo discloses personal information to authorities or other parties only when required by law or reasonably necessary to protect safety, security, or rights, and limits the disclosure to what is necessary.
8. Retention and destruction
The periods below are internal caps, not blanket statutory retention periods. Information is kept only while its purpose and lawful basis remain and is destroyed without delay when no longer needed, even before a cap expires.
| Category | Retention criteria |
|---|---|
| Active account | During account use; unnecessary personal information is deleted on account closure |
| Baby Profiles, care Records, journals, private photos, AI conversations, and stored Siri transcript text | Until you delete the material or account deletion completes; destroyed without delay when withdrawal of consent removes the processing basis |
| Shared Records | A Caregiver's access ends when they leave or are removed. Deleting the owner's Baby Profile or account deletes associated Records or removes personal identifiability, subject to other Caregivers' legitimate rights and statutory retention |
| Minimum residual records of deleted accounts | Up to 3 years, limited to the minimum information necessary for lawful purposes such as deletion handling or disputes; does not include care Records |
| Support inquiries and attachments | Up to 3 years after the inquiry closes, limited to resolution and dispute needs |
| Community posts, comments, images, reports, blocks, and moderation records | Up to 3 years where needed for safety, reports, or disputes |
| App Store billing and subscription records | Up to 7 years, limited to the minimum transaction and subscription information needed for verification, refunds, and disputes |
| Inactive push device information / notification outbox and processing records | Up to 90 days / up to 30 days |
| Account cleanup job records / API and security logs | Up to 90 days each |
| Docker and container logs | Up to 30 days |
| Database backups | Up to 30 days; managed database automatic backups are created daily and kept for 7 days |
| Object storage backup, versioning, and lifecycle copies | Up to 30 days where such copies are used |
| Consent records | Document version, language, consent or withdrawal time, and account link are kept while consent is valid and for up to 3 years after withdrawal or the end of service use |
| External AI provider copies | Separate from Litlo's retention; see Section 6 |
When you delete your account, Litlo removes access permissions and push tokens and deletes account data, private Records, and stored media. Electronic files are deleted so they cannot be recovered. Copies in backups and logs rotate out within the periods above and are not reused for ordinary service purposes; completed deletion requests are reapplied if a backup is restored.
9. Your rights and choices
You can exercise your rights directly in the app or by email:
- Edit or delete individual Records, journals, photos, Baby Profiles, and AI conversations in the app.
- Delete your account at any time in Settings > Delete Account.
- Withdraw the Litlo AI Consent in Settings > Litlo AI.
- Withdraw marketing consent in Settings > Notifications or through the unsubscribe link in any email.
- Request access, a copy, correction, deletion, or suspension of processing, or withdraw your health data consent, by emailing support@litlo.app.
Litlo may verify your identity and authority over the relevant Baby Profile but does not collect unnecessary identity documents. Declining an optional consent does not limit features that do not need it.
10. Security
Litlo applies access controls, encryption in transit, protection of stored data, access logging, deletion procedures, and incident response. No method of transmission or storage is completely secure, and Litlo does not claim certifications it has not obtained. You can change device permissions in iOS Settings; allowing notifications is different from consenting to marketing.
11. Marketing
Litlo sends promotional messages only if you agree to the optional Marketing Communications consent. Service notifications (Record, Caregiver, and billing notices) are sent regardless of that choice. Litlo does not send promotional push notifications between 9 p.m. and 8 a.m.
12. Changes to this Policy
Litlo announces changes to this Policy in the app with their effective date. Where a change requires new consent under applicable law, Litlo asks for your consent again in the app.
13. Contact
Taejun Park, operating as Litlo · support@litlo.app
Republic of Korea Addendum
This Addendum applies to Members in the Republic of Korea under the Personal Information Protection Act ("PIPA").
- Children under 14. Persons under 14 cannot create an account. Information about a child is provided by the Member as the child's legal representative (or with the legal representative's permission) under the Personal Information Collection and Use consent given at signup.
- Sensitive information. Health information is processed only with the separate consent required by Article 23 of PIPA (Consent to Collect and Use Health Data).
- Entrustment and overseas transfer. Hosting and storage by DigitalOcean, LLC (United States, NYC2/NYC3) and notification delivery by Apple Inc. (APNs) are entrusted processing necessary to perform the contract with the Member and are disclosed under Article 28-8(1)(3) of PIPA. The items, country, timing and method, recipient, and retention are listed in Section 6. Transfers to Google LLC (Gemini API) are made only with the Litlo AI Consent under Article 28-8(1)(1) of PIPA. You may refuse the overseas transfer or ask to stop it by emailing support@litlo.app; refusing the AI transfer limits only AI features, while hosting and notification delivery are needed to store and sync your account and Records.
- Rights. You may request access, correction, deletion, suspension of processing, and withdrawal of consent in the app or at support@litlo.app. Litlo responds without undue delay and within the period required by law.
- Marketing. Litlo reminds Members who consented to marketing of their consent status every 2 years as required by law.
- Destruction. Electronic files are deleted so they cannot be recovered, and paper records, if any, are shredded. Where another law requires preservation, Litlo stores only the necessary information separately for the required period.
- Remedies. For privacy infringement reports and advice, you may contact the Personal Information Infringement Report Center (118, privacy.kisa.or.kr) or the Personal Information Portal.
United States Addendum
This Addendum applies to Members in the United States, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA") and state consumer health data laws such as Washington's My Health My Data Act.
- Categories. In the last 12 months Litlo collected the categories described in Section 2: identifiers, customer records, commercial information (App Store purchase status), internet or device activity, audio-derived text, consumer health data, and inferences limited to the Service's summaries. Sources and purposes are described in Sections 2 through 5.
- No sale or sharing. Litlo does not sell personal information or share it for cross-context behavioral advertising, and does not use sensitive personal information for purposes other than those permitted by the CCPA. Litlo has no actual knowledge of selling or sharing personal information of consumers under 16.
- Disclosures for business purposes. Litlo discloses personal information to the processors listed in Section 6 and to Caregivers you invite.
- Your rights. Subject to applicable law, you may request to know, access, correct, or delete your personal information and to limit the use of sensitive personal information. Email support@litlo.app with the subject `Privacy Request`. An authorized agent may submit a request with your written permission. Litlo verifies requests using your account information and responds within 45 days unless an extension is legally permitted. Litlo will not discriminate against you for exercising your rights.
- Appeals. If Litlo denies a request, you may appeal by replying with the subject `Privacy Appeal`. Litlo responds to appeals within 45 days unless an extension is legally permitted. You may also contact the attorney general in your state where applicable.
- Consumer health data. Consumer health data is collected only with your Consent to Collect and Use Health Data. See the U.S. Consumer Health Data Privacy Policy for details.